The default nginx config will attempt to serve images etc located in web/var directly, not via phpfpm

However, by default the nginx container has not web/var mounted, thus serving of such images and files will fail.

A fix is to add this line :

diff --git a/doc/docker/distribution.yml b/doc/docker/distribution.yml
index 811d494..7cb28fe 100644
--- a/doc/docker/distribution.yml
+++ b/doc/docker/distribution.yml
@@ -52,6 +52,7 @@ services:
      - TIMEOUT=190
     volumes:
      - distribution:/var/www:ro
+     - vardir:/var/www/web/var:ro
     networks:
      - frontend
      - backend

However, I am quite sure this behavior has changed at some point in time and that all files, including images, where served via phpfpm so that permission checking could be done.
So is current behavior (let nginx serve them directly) the desirable one ?